Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Security Engineer Exam - Topic 2 Question 57 Discussion

Your company requires the security and network engineering teams to identify all network anomalies and be able to capture payloads within VPCs. Which method should you use?
C) Enable VPC Flow Logs on the subnet.
A) Define an organization policy constraint.
B) Configure packet mirroring policies.
D) Monitor and analyze Cloud Audit Logs.

Google Professional Cloud Security Engineer Exam - Topic 2 Question 57 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 57
Topic #: 2
[All Professional Cloud Security Engineer Questions]

Your company requires the security and network engineering teams to identify all network anomalies and be able to capture payloads within VPCs. Which method should you use?

Show Suggested Answer Hide Answer
Suggested Answer: C

VPC Flow Logs samples each VM's TCP, UDP, ICMP, ESP, and GRE flows. Both inbound and outbound flows are sampled. These flows can be between the VM and another VM, a host in your on-premises data center, a Google service, or a host on the internet. https://cloud.google.com/vpc/docs/flow-logs


by Kris at Dec 11, 2022, 07:37 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bonita
10 months ago
C is useful, but it won't give you payloads like B does.
upvoted 0 times
...
Brett
10 months ago
A is more about policies, not really what we need here.
upvoted 0 times
...
Ryan
10 months ago
Wait, can VPC Flow Logs really capture payloads? Not so sure about that.
upvoted 0 times
...
Florinda
11 months ago
Totally agree, packet mirroring is essential!
upvoted 0 times
...
Verlene
11 months ago
I think B is the best choice for capturing payloads.
upvoted 0 times
...
Germaine
11 months ago
I thought monitoring Cloud Audit Logs was more for compliance checks, not really for identifying network anomalies.
upvoted 0 times
...
Katina
11 months ago
I feel like we had a practice question similar to this, and packet mirroring was the answer there too.
upvoted 0 times
...
Eric
11 months ago
I'm not entirely sure, but I think enabling VPC Flow Logs is more about logging traffic rather than capturing payloads.
upvoted 0 times
...
Sophia
11 months ago
I remember we discussed packet mirroring in class, and it seems like the best way to capture payloads directly.
upvoted 0 times
...
Arlene
11 months ago
VPC Flow Logs could also be a good option, as they provide detailed information about network traffic. But Packet Mirroring seems more tailored to the specific requirements mentioned.
upvoted 0 times
...
Arlene
11 months ago
Alright, I think I've got a handle on this. Using CDN for the static assets makes sense to reduce the load on the web servers. And replacing the self-hosted database with RDS, along with read-only instances, should help with the database performance.
upvoted 0 times
...
Alyce
11 months ago
This question seems straightforward, but I want to make sure I understand the key factors to consider. I'll need to think through the pros and cons of each transfer price option.
upvoted 0 times
...
Lorean
11 months ago
Good point, Mariann. I think the key is to focus on the options that enhance the system and content organization, rather than just putting more burden on the user.
upvoted 0 times
...

Save Cancel